ccd9f0e97de9457b08904ed892a7e96fe816b714811a3f1c295554212e00424f

General

Target
[CPG Repacks]AV Company.zip
Size 259.1MB
Sample260818-sqk1tsvdlf
SHA256 ccd9f0e97de9457b08904ed892a7e96fe816b714811a3f1c295554212e00424f
MD5 74eeca5fefa3ef9b1f01b6a5a44c8035
SHA1 9ac1fc338e945e055401c37c6bff52c5eabe6b1c
SHA512 237d07e0b069e505d3a7627c95fbac43000c04873a78f4e3cd9df80abc5f4e1e5bd191202cf3d52c27b3669ca2c534aac7c4070139b54f10422d5ca1b6851629
SSDEEP 6291456:WqlX59gGdzNg2aGh4Xcm388aStdUvVI9jyZiCj7S9VQahs06zFziVHxfu3lIWgi/:WqlX7dzNdaG9m8hyII9jMicS9GaKVzFv
TLSH
T18DD83328A3BBC3492222B354526193A713B89827FD91FE35FB146AC49BFC3E5501FE54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  [CPG Repacks]AV Company.zip
- Size 259.1MB
- SHA256 ccd9f0e97de9457b08904ed892a7e96fe816b714811a3f1c295554212e00424f
- MD5 74eeca5fefa3ef9b1f01b6a5a44c8035
- SHA1 9ac1fc338e945e055401c37c6bff52c5eabe6b1c
- SHA512 237d07e0b069e505d3a7627c95fbac43000c04873a78f4e3cd9df80abc5f4e1e5bd191202cf3d52c27b3669ca2c534aac7c4070139b54f10422d5ca1b6851629
- SSDEEP 6291456:WqlX59gGdzNg2aGh4Xcm388aStdUvVI9jyZiCj7S9VQahs06zFziVHxfu3lIWgi/:WqlX7dzNdaG9m8hyII9jMicS9GaKVzFv
- TLSH
  T18DD83328A3BBC3492222B354526193A713B89827FD91FE35FB146AC49BFC3E5501FE54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  [CPG Repacks]AV Company/CPG.nfo
- Size 2KB
- SHA256 a26989d177a8fed0ad39fab185ba8778c60a877b5a77d68228d03d766b4a37dd
- MD5 7ad8469b2753dc271b5ebeb629f629ce
- SHA1 72ad9282515d45a8e08f68fd6a1aa8d4e4c108f4
- SHA512 f0307a13be2787a10289becda8bfd3ee4b3681d667fb394cf6fa3e22949d11debecc028f74bff456cfa5eb7d1fc3ac64be749a15469db22e15598c0202136389
- TLSH
  T1FD419A00CC93733D21A4C3B02D010A50FE96AD0F676B68D4701FA0587FB3AB61B9483A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral2
- Target
  [CPG Repacks]AV Company/data.cpg
- Size 255.1MB
- SHA256 0ef61687939e264812a39d40e0b7f648f36019d420ae1d8b17bae55e998f9087
- MD5 8b2ac7dc25cd11d5eec237c9015509ce
- SHA1 11379b016be53b74c49ec916ffcefae1d7da84f1
- SHA512 b541396f1eb77467760ca649458279dd5b29c1a6ed7b2eabe522a4acab5e378cb22b6ea6472e45d0d9d22ff127ddd9fef4cb5fb86fb8ec5756955b87282b6b1a
- SSDEEP 6291456:PcoOWWn8q2+MW/SeaBaG3mjLqyQFhlzXu3gF32ylTGjhDx:PcV8q2s+vjJzugFGQopx
- TLSH
  T12DD83354E4C70ECBED187BF020650A49331EAEBE57D8D91B9DD4783D09BDBA68883217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  [CPG Repacks]AV Company/setup.exe
- Size 4.5MB
- SHA256 28a024c815ff9b0b163e118338348b8b41a0780b11782d95e6a8a73ada059fe5
- MD5 477fc17ec169657c9f94ee741b72f5f4
- SHA1 949e4846e55f106fbed15ca842c410d2d43c489e
- SHA512 7ab60f9e5244d59b20e5b475864d5e1a5d77e36c1a6e50023d5494005e32c2ade2807ed6715a171e2a3267d46b3bdd5df5a44c4f91e36c3d5d574e649639ada5
- SSDEEP 98304:wEg8MKuGRSYVz0lzHZ+ZoFxtZVA5VLsu6loO+IoiX6l:AJKuGR0z5+ZKXZKVh6lo/DiO
- TLSH
  T14726E02AE1F4D42DDF5A067344B292D048766E7166158CFFBEE00C0BBB275E03A2A5DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral4